SP SLO responses not signed

[Sternath, Elmar]

You are absolutely right, both request and response are signed, I just missed checking the request parameters, I will check with Auth0 what's going wrong here.

Thanks and br,
Elmar

-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott via users
Sent: Tuesday, August 13, 2024 4:53 PM
To: users at shibboleth.net
Cc: Cantor, Scott <cantor.2 at osu.edu>
Subject: Re: SP SLO responses not signed

On-list please.

> Maybe I was not clear enough in my first email.

I didn't pick up that you meant the response, but the answer remains the same. I just verified for myself with an SP that it signs out of the box when it can unless it's told not to, both requests and responses.

Admittedly a POST response is more obvious in doing so, but that doesn't change the answer.

-- Scott


--
For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net